CVE-2013-4405 Cross-site request forgery in n/a
Remote attackers can hijack cumin user sessions via CSRF in the Red Hat MRG Grid web interface, requiring user interaction.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2013-4405?
CVE-2013-4405 is a medium-severity vulnerability in Redhat Enterprise Mrg, published on 23 Dec 2013. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of cumin users for unspecified requests.
Weakness: CWE-352
Which versions are affected by CVE-2013-4405?
It affects 1 product.
Products include Redhat Enterprise Mrg.
How do I fix CVE-2013-4405?
Apply the vendor's patch.
Is CVE-2013-4405 being exploited?
There is no known exploitation of CVE-2013-4405 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Mrg
Sources
Also known as GHSA-gpp7-2xpg-h4f8.